HIPAA/HITECH Compliance Assurance

Why Does HIPAA/HITECH Compliance Matter?

A Covered Entity(CE) or Business Associate(BA) needs to legally comply with the federal HIPAA/HITECH compliance assurance’s security, privacy, and breach rules/standards to protect individuals’ electronic Protected Health Information (ePHI) that is created, received, used, or maintained. The HIPAA Privacy Rule establishes national standards to protect individuals’ medical records and other personal health information and applies to health plans, healthcare clearinghouses, business associates, and those health care providers that conduct certain health care transactions electronically. The security rule requires appropriate administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information. The breach rule covers the breach notification procedures introduced by the HITECH act for unsecured protected health information.

Our deliverables include but not limited to:

Technical Security Risk Assessment Report

Vulnerability Scan Report

HIPAA/HITECH Compliance Assessment Report

Customized Information Security Policy

Customized Privacy Policy

Unprotected PHI Data Breach Policy

Notice of Privacy Practices

Business Associate Contract Template

Other Customized Policies and Procedures

Customized HIPAA Awareness Training

Automated Forms and Process Implementation

Vendor Compliance and Review

Advisory Services and CMS, HHS/OCR, or OIG Audit Support(Premium Plans Only)

Online Platform to Manage HIPAA Compliance

Key HIPAA/HITECH Regulations:

The HIPAA Privacy Rule
Requires appropriate safeguards to protect the privacy of personal health information, and sets limits and conditions on the uses and disclosures. The Rule also gives patients rights over their health information, including rights to examine and obtain a copy of their health records and to request corrections.

The HIPAA Security Rule
Establishes national standards to protect individuals’ electronic personal health information (ePHI) that is created, received, used, or maintained by a covered entity. The Security Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of ePHI.

Breach Notification Rule
45 CFR §§ 164.400-414, requires HIPAA covered entities and their business associates to provide notification following a breach of unsecured protected health information pursuant to section 13407 of the HITECH Act.